Hi All,
There are some vulnerabilities in the Pac...
# pact-brokerb
Ben Brugman
10/12/2023, 12:49 PMHi All,
There are some vulnerabilities in the Pact Broker image due to Supercronic.
Supercronic is already working on a upgrading their GO version. https://github.com/aptible/supercronic/pull/138
Do you at Pact have this on your radar and will you update to the new version of supercronic for the broker image?
https://github.com/pact-foundation/pact-broker-docker/blob/master/Dockerfile (line 22 - 28)
y
Yousaf Nabi (pactflow.io)
10/12/2023, 1:43 PM
Hey, I’d not had that on my radar (been pretty choco with Pactober), but we do update and accept contributions to update the supercronic version, you can check some previous PR’s
I note that its on v0.2.24 and v0.2.26 is out - so we could update it now in the interim.
Would you be happy to raise a PR?
☝️ 1
b
Ben Brugman
10/16/2023, 8:32 AMHi, tnx for the reply, by the looks of it you created a PR yourself already, i left a comment. 🙏
Ben Brugman
10/19/2023, 3:15 PMHi, I made a commit and tried to push it to your branch, but i think i don't have permissions
y
Yousaf Nabi (pactflow.io)
10/19/2023, 3:20 PM
Hey, you won’t be able to, as you are a member of the organisation, feel free just to drop it on a PR
Yousaf Nabi (pactflow.io)
10/19/2023, 4:01 PM
sorry that should say aren’t* - I can’t edit now, and I was replying just before dropping into a meeting